Privacy

Who runs this

RowliPurli is operated by Olena Nevel, a sole proprietor in the United States. There is no company behind it and no staff — one person makes it and one person answers the email. For anything in this policy, get in touch.

What we collect

Your email address, because that is how you sign in. There is no password; we send you a code instead, which means the email address is the account.

Everything else we hold is something you put there yourself: your projects, the parts and steps inside them, your row counts, notes, gauges, yarns, designer names and reference links, plus any pattern PDFs and step photos you upload. We also store two small preferences — whether the screen stays awake while you knit, and which projects you last chose to see.

That is the whole list. We do not ask for your name, your address, your age, or your location, and we have no way to infer them.

What we don't do

There is no analytics of any kind in RowliPurli. No Google Analytics, no tracking pixel, no session recording, no heatmap, no product telemetry. Nobody is counting your taps, and there is no dashboard anywhere showing what you did in the app.

We do not sell your data, share it for advertising, or hand it to a data broker. There is no advertising in the app, so there is nothing to target.

Why we hold it

To run the app for you — to show you your projects, keep your counts, and let you sign back in. That is the only purpose. In the language of the GDPR, the lawful basis is performance of a contract: you asked for an account and this is what an account consists of.

Who else sees it

Three companies process data on our instruction, and no others:

• Supabase — the database, the sign-in system, and the file storage holding your pattern PDFs and step photos. Supabase sees everything in the list above.
• Vercel — hosting. Every request to the app passes through Vercel, so it handles your traffic, though it holds none of your content itself.
• Stripe — donation payments, and only if you choose to donate. Stripe receives your email address for the receipt and your card details, which never touch our servers.

All three are US companies and your data is held in the United States. If you are in the UK or the EU, that is a transfer outside your own jurisdiction, made under each provider's standard contractual clauses.

How long we keep it

For as long as you have an account. There is no scheduled deletion and no expiry — an old project stays until you remove it or close the account.

Deleting everything

Settings has a Delete account button, and it does what it says: it removes your uploaded files first, then your account and every row attached to it. It is immediate and it is not reversible.

Two honest limits. Your browser keeps a few things on your own device that a server-side deletion cannot reach — your theme choice, a dismissed install hint, and any counter taps not yet synced. Clearing the site's data in your browser removes those. And if you have ever donated, Stripe keeps its record of the payment; see Donations.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to how it is used, or ask us to restrict it. Deletion is a button in Settings. For anything else, email us and we will do it — there is no form and no fee.

If you are in the EU or the UK you also have the right to complain to your data protection authority. We would rather you told us first, but it is your right either way.

We have not appointed an EU representative under Article 27. That is a gap we know about rather than a claim that the rule does not apply, and it does not reduce any of the rights above.

Cookies and on-device storage

There is no cookie banner, because there is nothing to consent to. Everything stored on your device is strictly necessary to make the app work, all of it is first-party, and none of it is used for tracking.

• A sign-in cookie — set by Supabase, named for the project it belongs to. It is what keeps you signed in; clearing it signs you out.
• A cache of the app itself — so RowliPurli opens without a network connection. It is replaced on every new version.
• A cache of your pattern PDFs and step photos — so a chart opens in a basement with no signal. This one is cleared when you sign out.
• Your theme choice and a dismissed install hint — stored in your browser so the app looks the way you left it.
• Row counts not yet saved — the counter is the one part of RowliPurli that works offline, so your taps are held on the device until there is signal to send them.

Where it all lives

Your account and preferences

Held in Supabase, in the United States. Removed when you delete your account.

Projects, parts, steps, counts, notes, gauges, yarns and links

Held in Supabase, in the United States. Removed when you delete your account.

Pattern PDFs you upload

Held in Supabase file storage, in the United States. Deleted from storage before the account itself goes.

Step photos you upload

Held in Supabase file storage, in the United States. Deleted from storage before the account itself goes.

Your sign-in session

Held in A cookie on your device. Cleared when you sign out; the account record goes on deletion.

A cached copy of the app

Held in Your browser. Replaced on every new version of the app.

Cached pattern PDFs and step photos

Held in Your browser. Cleared when you sign out.

Theme choice and dismissed install hint

Held in Your browser. Stays on the device — clear the site's data in your browser to remove it.

Row counts not yet synced

Held in Your browser. Stays on the device — clear the site's data in your browser to remove it.

Donation payment records

Held in Stripe only. We hold none of this and cannot delete Stripe's copy. See Donations.

Younger knitters

Plenty of people learn to knit long before they turn 13, and RowliPurli is for them too. The age rule is about the account, not the knitting: an account holder needs to be 13 or older, because an account stores an email address and we are not set up to collect a child's data lawfully.

So a younger knitter uses a parent's or guardian's account. The grown-up owns it, the data sits with someone who agreed to it, and the projects inside can be anyone's.

We don't knowingly let anyone under 13 hold their own account. If you believe one has, tell us and we will remove it.

Changes to this policy

If this policy changes, the date at the top changes with it. There is no version history — if a change ever meant collecting something new, this page would say so before the collecting started, not after.